Merlin Protocol security record

Polygon (POS)merlinprotocol.io

As of 21 Oct 2026, Merlin Protocol has 2 audit reports by 2 security firms on Trustblock; the latest is by Hacken, dated 25 Apr 2024. Those reports list no open critical findings.

Critical findings
No open critical findings
Across 2 reports.
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits2

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Merlin Protocol / DAOSecurity firm: HackenDate: Scope: Files named in the reportNo open critical findingsOpen · hacken.io
Merlin Protocol: HashNFT auditSecurity firm: PeckShieldDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub

Findings32

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical000
High003
Medium019
Low6013
HighchangePercentage() Function Swaps Incorrect AmountMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
HighExhaustion Attack In Sale Demand May Lead To Incorrect basketRequestsSum ValueMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
HighFee Manager Can Withdraw Infinitive Fee From the ContractMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumChainlink’s latestRoundData() Might Return Stale or Incorrect ResultsMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumFees Are Not Restricted And They Can Be FrontrunnedMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumIncorrect Balance Update In changePercentage() FunctionMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumIncorrect Comparison Between Token Amount and USDT Value in closeBasket() FunctionMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumIncorrect Token Swapping Due to Faulty swapCounter Reset Logic in resetSwapCounter() FunctionMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumIncorrect Token Swapping in the swap() FunctionMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumMissing Slippage CheckMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
Show 10 more
MediumPartial Withdrawal LockMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
MediumRevisited Logic in BitcoinEarningsOracleMerlin Protocol: HashNFT audit · PeckShield · 20 Feb 2023Fixed

The report gives no description here.

Open the report
LowInteractions With AMMs Do Not Use Proper Deadlines For OperationsMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowLack of amountOutMinimum Value During Uniswap SwapsMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowLack of Service Type ValidationMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowMissing Checks For address(0) In constructorMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowMissing Zero Value CheckMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowPool Validation of Assets is MissedMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowPrice could return zeroMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowrenounceOwnership() Can Be Called AccidentallyMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
Show 5 more
LowReturn Values Of transfer()/transferFrom() Not CheckedMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowTesting Tools Are Not Removed From the Production ContractsMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowUnsafe int To uint ConversionMerlin Protocol / DAO · Hacken · 25 Apr 2024Fixed

The report gives no description here.

Open the report
LowAccommodation of Non-ERC20-Compliant TokensMerlin Protocol: HashNFT audit · PeckShield · 20 Feb 2023Fixed

The report gives no description here.

Open the report
LowSuggested Adherence of Checks-Effects-Interaction PatternMerlin Protocol: HashNFT audit · PeckShield · 20 Feb 2023Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="merlin-protocol"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us